Skip to content
Squatch MCP

MCP Bill of Materials

A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/dc3017e8-e11f-4f46-b021-103b84a79567/mcbom.

MCP Bill of Materials

root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "dev.workers.shopttyass-85f.upgrade-brief/upgrade-brief"
title: "Upgrade Brief"
description: "Breaking changes between two versions: npm, PyPI, GitHub Actions, Helm, Terraform, crates.io, Go."
version: "0.5.0"
homepage_url: "https://upgrade-brief.shopttyass-85f.workers.dev"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "dev.workers.shopttyass-85f.upgrade-brief"
display_name: "dev.workers.shopttyass-85f.upgrade-brief"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://upgrade-brief.shopttyass-85f.workers.dev/mcp"
endpoint_host: "upgrade-brief.shopttyass-85f.workers.dev"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[12]
0{9}
name: "crates_breaking_changes"
title: "crates breaking changes"
effect: "WRITE"
effect_confidence: 0.405
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.577
2{2}
capability: "SOURCE_CODE"
confidence: 0.632
risk_severity: "MEDIUM"
fingerprint: "756f04f27d9f52efd5b0e061da695721c4f849dfc262f6f846d48c7f04a15c0e"
input_schema_fingerprint: "0f92c1d410a79734cf8ae7d9a90ffde3497139f50ac5c5e07592a8060ddb40a7"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
1{9}
name: "dependency_upgrade_plan"
title: "dependency upgrade plan"
effect: "READ"
effect_confidence: 0.524
capabilities[0]
risk_severity: "INFO"
fingerprint: "888688f93b3f82931ac9cfe7ea3efb7d5f261641a5e197f5724361c53c5470f5"
input_schema_fingerprint: "8268a486c053952be1e5d8f02fd8c39507bfb34b21f6646a3ff856a427f8ce59"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
2{9}
name: "github_action_breaking_changes"
title: "github action breaking changes"
effect: "WRITE"
effect_confidence: 0.494
capabilities[4]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.52
2{2}
capability: "PERSONAL_DATA"
confidence: 0.577
3{2}
capability: "SOURCE_CODE"
confidence: 0.946
risk_severity: "MEDIUM"
fingerprint: "12245150f73305475b961d249ece430236aea5165efa8c28d02355580821f35d"
input_schema_fingerprint: "1c6800eccc98bea23a982109ebcfcf5f46867a9ebd2736f2698811d1ac5e725e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
3{9}
name: "go_breaking_changes"
title: "go breaking changes"
effect: "WRITE"
effect_confidence: 0.405
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.577
2{2}
capability: "SOURCE_CODE"
confidence: 0.567
risk_severity: "MEDIUM"
fingerprint: "a3445bd91805f2aa455b7015fd6e44771289125bd5907d60357188f061fc378f"
input_schema_fingerprint: "e88553f5b89d8ab7374b158d5a9b70909268db0bee42bf793583546807690012"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
4{9}
name: "helm_breaking_changes"
title: "helm breaking changes"
effect: "EXECUTE"
effect_confidence: 0.885
capabilities[4]
0{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.805
1{2}
capability: "EMAIL"
confidence: 0.577
2{2}
capability: "PERSONAL_DATA"
confidence: 0.577
3{2}
capability: "SOURCE_CODE"
confidence: 0.567
risk_severity: "HIGH"
fingerprint: "71690c4278ae7c253c4e6e939fd75f66f490cbdf845f0761c7912fe3ee5060a3"
input_schema_fingerprint: "51143238903bc0bbca054b9876d8b6549a8376ac4e34afa64044971642d37308"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
5{9}
name: "npm_breaking_changes"
title: "npm breaking changes"
effect: "WRITE"
effect_confidence: 0.3
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.577
2{2}
capability: "SOURCE_CODE"
confidence: 0.632
risk_severity: "MEDIUM"
fingerprint: "c662794147060b6d1f454a569013df5861f4dfe6fd274a1b39ffe67147b6886a"
input_schema_fingerprint: "73ab3e59ee9951debc4e6d33fc55bfb0e8f8baed07ccf7c49c41cf44a2f0a96f"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
6{9}
name: "npm_changelog"
title: "npm changelog"
effect: "READ"
effect_confidence: 0.32
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.577
risk_severity: "MEDIUM"
fingerprint: "940b8e3f16b82c94af24c164040649436e0c531913bce482ac89496784db241e"
input_schema_fingerprint: "843d77d5f999610fba9dc16f90713c485e08c63c11fd97ad9c56b4c8291a92db"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
7{9}
name: "npm_versions"
title: "npm versions"
effect: "READ"
effect_confidence: 0.44
capabilities[0]
risk_severity: "INFO"
fingerprint: "83e8b9f404caf41f674d8da4da80fa82e9293bec6d8f9173b3b7f771c351eba9"
input_schema_fingerprint: "036876fee0485ed9a2f55931aa9b8aa3f5d04a234f41ae57635c9cb5de7d787b"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
8{9}
name: "pypi_breaking_changes"
title: "pypi breaking changes"
effect: "WRITE"
effect_confidence: 0.3
capabilities[3]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.577
2{2}
capability: "SOURCE_CODE"
confidence: 0.632
risk_severity: "MEDIUM"
fingerprint: "f52a06b2c9c40b674a5e07d76f58b675bf5c88f76002db54f7b9abc9660a8cfb"
input_schema_fingerprint: "28d55ea498d40428dfa4d1eb7b6a1e518f99cba187e3333fffba4095d8991dce"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
9{9}
name: "pypi_changelog"
title: "pypi changelog"
effect: "READ"
effect_confidence: 0.32
capabilities[2]
0{2}
capability: "EMAIL"
confidence: 0.577
1{2}
capability: "PERSONAL_DATA"
confidence: 0.577
risk_severity: "MEDIUM"
fingerprint: "6107e10527f2afcc4319b6ca75f90b177860dffad7a809bbcfca6154b6b83454"
input_schema_fingerprint: "ae2e14308d78bc7adc35c389ae77d1992723ce9d1a0b37cd59a269c2dc1c1a73"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
10{9}
name: "pypi_versions"
title: "pypi versions"
effect: "READ"
effect_confidence: 0.44
capabilities[0]
risk_severity: "INFO"
fingerprint: "4370be02470209194b1aa538ab90c5b37064c187a58157ce5d36d8d093ac6a37"
input_schema_fingerprint: "8ec9d68189903f5eeada04a9d879e0e2c90830a8a2c7e9b36aa34a940eb0c6da"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
11{9}
name: "terraform_breaking_changes"
title: "terraform breaking changes"
effect: "EXECUTE"
effect_confidence: 0.885
capabilities[3]
0{2}
capability: "CLOUD_INFRASTRUCTURE"
confidence: 0.925
1{2}
capability: "EMAIL"
confidence: 0.577
2{2}
capability: "PERSONAL_DATA"
confidence: 0.577
risk_severity: "HIGH"
fingerprint: "51dfc64c256004f66634ecbcac140258b62ab9140664204f92bdc8a681a580c0"
input_schema_fingerprint: "cc369f58b69627ed2dd9a81a1ad83f1e35eb4d957f5ba7c084c8d800bbdb98f9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
resources[0]
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "upgrade-brief.shopttyass-85f.workers.dev"
registrable_domain: "shopttyass-85f.workers.dev"
source: "transport"
findings[4]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "HIGH"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "helm_breaking_changes"
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "HIGH"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "terraform_breaking_changes"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "dev.workers.shopttyass-85f.upgrade-brief/upgrade-brief"
registry_content_sha256: "8281c35f3b62ed05daf0913a2bcb42ba2780313571e127f854150e53803d833c"
scan_snapshot_fingerprint: "1854b2cc7c5749de9848804bbb57766f76ddc8185d06fd675571e6a05d7dce08"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T07:17:30.783Z"
observed_at: "2026-11-08T12:49:40.834+00:00"
registry_published_at: "2026-10-28T23:33:28.647396+00:00"
registry_updated_at: null